Try Policy Editor (poledit). It should allow you to control how many times I user can attempt to log on before the account is blocked. If that doesn't work, look around for some third party tools (considering it's really easy to get past the ME login screen).